PT-2002-2119 · Mantis · Mantis

Publicado 2002-10-04 · Atualizado 2017-10-10 · CVE-2002-1116

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mantis versions 0.17.4a and earlier

Description: The issue concerns the "View Bugs" page, specifically the view all bug page.php file, which incorrectly includes summaries of private bugs. This affects users without access to any projects, potentially exposing sensitive information.

Recommendations: For Mantis versions 0.17.4a and earlier, as a temporary workaround, consider restricting access to the view all bug page.php file until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1116

DSA-161

Produtos afetados

Mantis

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1116 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9955 · Nota
• http://securityfocus.com/bid/5565 · Nota
• http://marc.info/?l=bugtraq&m=103014152320112&w=2 · Nota
• http://debian.org/security/2002/dsa-161 · Aviso do Fabricante